Summary
Successful exploitation of this vulnerability could allow a low-level user to escalate privileges and fully compromise the device.
Vulnerabilities 1
-
High 7.8
ABB Device Library Wizard Information Disclosure Vulnerability
Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data
Revision history
-
#1
ICSA-20-175-03 ABB Device Library Wizard
References
-
ICS Advisory ICSA-20-175-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-175-03
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-20-175-03
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B